nanog mailing list archives

RE: Loss of Telnet Capability to 6509


From: "Jason Frisvold" <friz () corp ptd net>
Date: Wed, 28 Jul 2004 15:33:45 -0400


Do you have ACL's restricting access to the vty's?  I've seen instances where telnet ports get locked up because of 
port scanning and/or attacks...

--
Jason Frisvold
Penteledata


-----Original Message-----
From: Richard J. Sears [mailto:rsears () adnc com] 
Sent: Wednesday, July 28, 2004 2:54 PM
To: Nanog
Subject: Loss of Telnet Capability to 6509



We posted this to cisco-nsp but someone suggested posting it here as
well...



We have a 6509 running a SUP720 in IOS only mode (no cat os). 

At around 4am this morning, we lost our ability to telnet to 
the router.
Running a tcpdump shows that the router never responds to the telnet
request. 

All functions and interfaces on the router seem fine (bgp, 
etherchannel,
ibgp, vtp, hsrp) and I can console into the sup with no 
problems at all,
we just cannot telnet into it. The CPU is at around 6%.

I have checked all access lists on the router, none were added/removed
or modified on line vty that would cause this problem. All logging
appears normal.

We are running Version 12.2(17a)SX3.

Anyone have a similar problem or know how to check or restart 
the telnet
process on the router without a reload...?


******************************************
Richard J. Sears
Vice President         
American Digital Network                          
----------------------------------------------------
rsears () adnc com
http://www.adnc.com
----------------------------------------------------
858.576.4272 - Phone
858.427.2401 - Fax
INOC-DBA - 6130
----------------------------------------------------

I fly because it releases my mind 
from the tyranny of petty things . . 


"Work like you don't need the money, love like you've
never been hurt and dance like you do when nobody's
watching."




Current thread: